2024-02-19_8232f1abd34451531174d9ae7b349dbb_krakencryptor | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-19_8232f1abd34451531174d9ae7b349dbb_krakencryptor
Size

5.9MB
MD5

8232f1abd34451531174d9ae7b349dbb
SHA1

7292447e5ec66de9b3607023313b922ab810b9db
SHA256

74451b27db85707101decf28ec073c6057ae45ca03b427629a76637bb88da96e
SHA512

ac144c3643e7cc5e8db8bea5d9192966fc15f06508fba392270a4055f4ddfcf1c1ccab5214f6a27a160a81e97e5cd1aa161caf4297436b156c35ff1043ee4348
SSDEEP

49152:BbO20dnlncQQHtjZKxqYDZf+rbBljp0YQGQR:W1lcQ0jAld8bBljpNQ3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-19_8232f1abd34451531174d9ae7b349dbb_krakencryptor

Files

2024-02-19_8232f1abd34451531174d9ae7b349dbb_krakencryptor
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\leonid\my_NL___\obj\Debug\my_NL.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ